Update boards issue creation authorization

6dda8592 · Heinrich Lee Yu · 5b27e2db · 6dda8592
Commit 6dda8592 authored Oct 24, 2018 by Heinrich Lee Yu
Hide whitespace changes
Inline Side-by-side

Showing with 8 additions and 1 deletion

app/controllers/concerns/boards_responses.rb app/controllers/concerns/boards_responses.rb +8 -1

No files found.
--- a/app/controllers/concerns/boards_responses.rb
+++ b/app/controllers/concerns/boards_responses.rb
@@ -50,7 +50,14 @@ module BoardsResponses
  end

  def authorize_create_issue
-    authorize_action_for!(project, :admin_issue)
+    board = board_parent.boards.find(issue_params[:board_id])
+    list = board.lists.find(issue_params[:list_id])
+
+    if list.backlog?
+      authorize_action_for!(project, :create_issue)
+    else
+      authorize_action_for!(project, :admin_issue)
+    end
  end

  def authorize_admin_list